Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

pluginsGLPI Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-11321`GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import	Exploitation statusNot known exploited	FixYes	Affected productdatainjection	Published07/10/2026	SeverityHigh
`CVE-2026-53987`GLPI 11 before 2.14.4 Tag Plugin Stored Cross-Site Scripting in Kanban Badge Rendering	Exploitation statusNot known exploited	FixYes	Affected productGLPI 11	Published07/09/2026	SeverityHigh
`CVE-2026-23489`Fields GLPI plugin vulnerable to RCE in dropdown generation	Exploitation statusNot known exploited	FixYes	Affected productfields	Published03/16/2026	SeverityCritical
`CVE-2026-22821`mreporting affected by a SQLI on date change	Exploitation statusNot known exploited	FixYes	Affected productmreporting	Published02/12/2026	SeverityMedium
`CVE-2025-65035`GLPI Database Inventory Plugin Vulnerable to Stored Object Injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productdatabaseinventory	Published12/19/2025	SeverityMedium
`CVE-2025-53360`pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests	Exploitation statusNot known exploited	FixYes	Affected productdatabaseinventory	Published11/18/2025	SeverityMedium
`CVE-2025-27153`Escalade GLPI Plugin Vulnerable to Improper Access Control	Exploitation statusNot known exploited	FixYes	Affected productescalade	Published07/01/2025	SeverityMedium
`CVE-2024-53850`The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation	Exploitation statusNot known exploited	FixNot confirmed	Affected productaddressing	Published12/26/2024	SeverityHigh
`CVE-2024-45600`Fields GLPI plugin has an Authenticated SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productfields	Published12/26/2024	SeverityHigh
`CVE-2023-33971`Formcreator vulnerable to stored XSS from ##FULLFORM##	Exploitation statusPublic exploit	FixNot confirmed	Affected productformcreator	Published05/31/2023	SeverityMedium
`CVE-2023-29006`Order GLPI plugin vulnerable to remote code execution from authenticated user	Exploitation statusNot known exploited	FixNot confirmed	Affected productorder	Published04/05/2023	SeverityHigh
`CVE-2023-28855`Fields GLPI plugin vulnerable to unauthorized write access to additional fields	Exploitation statusNot known exploited	FixNot confirmed	Affected productfields	Published04/05/2023	SeverityMedium
`CVE-2021-39190`SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor	Exploitation statusNot known exploited	FixYes	Affected productsccm	Published09/22/2022	SeverityMedium
`CVE-2021-43779`Remote Command Execution vulnerability	Exploitation statusPublic exploit	FixNot confirmed	Affected productaddressing	Published01/05/2022	SeverityCritical
`CVE-2021-43778`Path traversal in GLPI barcode plugin	Exploitation statusNot confirmed	FixYes	Affected productbarcode	Published11/24/2021	SeverityCritical